Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IMEPUbHNyvnW1J4FUbOMl2CTbv4.roa
File: IMEPUbHNyvnW1J4FUbOMl2CTbv4.roa (raw, json)
Hash identifier: 843zklDeLEtMukf8huA4kVzk7YVHrPBVX6N/4oxBzQE=
Subject key identifier: 20:C1:0F:51:B1:CD:CA:F9:D6:D4:9E:05:51:B3:8C:97:60:93:6E:FE
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979A588A882D7E7BEC8F03A6D316CEA80F
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IMEPUbHNyvnW1J4FUbOMl2CTbv4.roa
Signing time: Mon 23 Jun 2025 01:13:03 +0000
ROA not before: Mon 23 Jun 2025 01:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 02:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:58:8a:88:2d:7e:7b:ec:8f:03:a6:d3:16:ce:a8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 01:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20c10f51b1cdcaf9d6d49e0551b38c9760936efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:f4:1a:2e:e2:d6:ef:aa:b8:fe:98:b5:ba:
5c:3e:65:0f:8c:ea:4f:bb:9a:75:b4:5d:5e:34:1d:
c8:3d:7e:5e:29:e1:bf:fe:ea:a7:ba:bf:68:ad:88:
33:4b:10:a3:cd:b0:b7:8d:d9:5c:45:7d:5f:8e:17:
e6:f2:32:25:ec:0c:e4:a7:1f:a8:13:90:a3:72:6e:
48:f2:61:56:8b:9d:d0:01:7f:04:57:cc:3d:44:16:
6c:bd:0e:1e:07:9c:be:f6:cd:df:e8:78:45:05:16:
d3:a5:e1:7a:13:54:4a:12:05:f8:7f:d7:8e:5a:c0:
07:e2:91:3e:f9:87:78:b0:86:69:41:a6:d0:9c:57:
33:ad:f6:c1:6d:82:c4:00:42:45:a2:54:90:f9:b9:
20:4e:08:a8:c6:9a:4b:5d:09:d4:11:1d:fd:e9:fc:
58:20:ca:03:b8:b8:69:6c:6f:38:de:7f:ff:5e:a1:
53:52:2d:aa:dc:10:e2:02:3e:8f:ae:52:fb:a1:00:
4b:03:11:49:66:de:a0:dd:33:3d:97:ee:ab:5b:d7:
75:22:9a:b8:a5:e9:13:aa:10:62:da:93:0f:ab:95:
f4:c6:1b:0b:8d:09:ff:44:0e:e3:d7:e5:16:5e:2b:
66:b7:10:bf:d9:06:56:52:9f:96:13:9b:f3:d8:e6:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C1:0F:51:B1:CD:CA:F9:D6:D4:9E:05:51:B3:8C:97:60:93:6E:FE
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IMEPUbHNyvnW1J4FUbOMl2CTbv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
43:c1:83:94:55:79:fd:14:dd:38:7c:66:3a:7d:50:76:54:6e:
78:08:0d:79:3b:df:6c:1a:9d:2e:31:84:2d:c9:fe:d4:6f:2d:
c8:ec:bf:17:42:3a:6e:22:ce:2b:21:59:77:f4:17:25:dd:ab:
b5:c9:1e:e9:28:eb:d8:b3:3f:66:a9:28:73:6e:fe:49:e4:79:
80:f4:3f:b6:31:bf:cb:f7:65:51:d1:0d:dd:dc:5d:d6:0f:b5:
27:2e:c0:1f:29:29:4b:36:ed:a5:32:7e:d3:af:e7:3f:06:5e:
b5:43:d1:df:86:5a:c9:75:ed:f7:c8:58:0c:1e:d3:55:d2:a2:
dc:4b:c7:ae:77:53:b0:55:d7:d3:ce:93:36:bb:46:02:46:f8:
67:e7:db:e3:7b:45:fd:f5:30:6b:9a:c0:57:d9:9b:41:f9:e4:
a6:10:7f:e6:6d:83:38:68:1b:3c:91:ed:fb:86:51:64:28:4a:
82:19:be:cb:53:bc:cb:03:bc:b2:d2:4b:02:76:eb:c3:81:27:
80:39:ca:ba:9e:14:5c:d5:26:c4:5e:ef:99:6d:bd:66:5f:02:
8b:b2:59:3d:f3:09:36:e9:2a:e1:bc:8c:82:b4:9c:15:d2:ba:
24:ee:10:49:d2:2b:91:a1:38:43:f8:91:25:81:2e:6b:48:72:
77:da:97:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:34:54 2025 by rpki-client